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DETAILED ACTION 
Continued Examination Under 37 CFR 1.114 

1 . A request for continued examination under 37 CFR 1.114, including the fee set 
forth in 37 CFR 1 .17(e), was filed in this application after final rejection. Since this 
application is eligible for continued examination under 37 CFR 1 .1 14, and the fee set 
forth in 37 CFR 1 .17(e) has been timely paid, the finality of the previous Office action 
has been withdrawn pursuant to 37 CFR 1 .1 14. Applicant's submission filed on 
06/05/2006 has been entered. 

2. The text of those sections of Title 35,U.S.Code not included in this section can be 
found in the prior office action. 

3. The prior office actions are incorporated herein by reference. In particular, the 
observations with respect to claim language, and response to previously presented 
arguments. 

4. Claims 13 and 14 have been cancelled. 

5. Claims 10 and 11 have been amended. 

6. New claims 21-37 have been added. 

7. Claims 1 -1 2 and 1 5-37 are pending. 

Response to Arguments 

8. Applicant's arguments with respect to the claims have been considered but are 
moot in view of the new ground(s) of rejection. 
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Claim Rejections - 35 USC § 103 

9. Claim 11, 12 and 15-20 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Nielson (6,182,229 B1) in view of Bellemore et al (6,145,086 A), and 
further in view of Brown et al (6,618,806 B1). 

As per claim 11 Nielson (6,182,229 B1) teach a method of changing a first password 
for securing files accessible by password data entry comprising the steps of: 
determining a plurality of files secured with the first password (see col.3, Iine67 and 
col.4, lines 1-2 where passwords within the database protect the remote server; 
col.3, lines 12-22 where a table with each entry of URL specifies the site access 
protocol and the name of the site where each URLs corresponds to plurality of 
files (please see definition of URL in a computer dictionary), and the encrypted 
password that corresponding to a url file as depicted in fig. 2 corresponds to 
Applicant's first password that secure the file) ; providing a second other password 
for securing the plurality of files ( see col. 19-20 where it disclose the password 
particular to specific site (URL address (file) could be random (changed or 
updated) for enhancing the security where such password corresponds to 
Applicant's first, second or any passwords in the database ;col.3, lines 21-24 
disclose a master password that being used to encrypt the passwords for the 
remote server entry and possibly the ids, this master password corresponds to 
the second password that protects security for the urls by encrypting the access 
password of url); for each file secured with the first password, accessing the file with 
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the first password (see fig. 2 where the first password corresponds the url is used 
to access the web site once is decrypted, it also can be done manually or 
automatically) and securing the file with the second other password (see col. 3, lines 
21-24 disclose a master password that being used to encrypt the passwords for 
the remote server entry and possibly the ids, this master password corresponds 
to the second password that protects security for the urls that corresponds to 
files that are being secured) ; storing the second other password in the password 
database (see col.4, lines 34-36 where it disclose the master password that 
corresponds to Applicant's second password is stored in the memory; fig. 3, item 
312 and 314 disclose the master password or second password stored in the 
password database) but do explicitly disclose the step of authorizing an individual 
requesting a change of the first password prior to changing the first password; and 
determining a user authorization method having an associated security level sufficient 
for accessing the secure password; authorizing an individual according to the secure 
authorization method. 

Bellemore et al (6,145,086 A) disclose the step of authorizing an individual requesting a 
change of the first password prior to changing the first password (see col.6, lines 58-63 
where the request for change of password is being done by client that 
corresponds to Applicant's individual). It would have been obvious to one of ordinary 
skilled in the art at the time the invention was made to utilize Bellemore et al's history 
table and password change request in Neilson's password database security method in 
order to determine whether the proposed password may be used as a password by 
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archive old passwords for approval of new password and by comparison means to be 
sure the new password does not be the same as last N old passwords. 
Nielson (6,182,229 B1) in view of Bellemore do not explicitly determining a user 
authorization method having an associated security level sufficient for accessing the 
secure password; authorizing an individual according to the secure authorization 
method. However Brown et al (6,618,806 B1) teach determining a user authorization 
method having an associated security level sufficient for accessing the secure 
password; authorizing an individual according to the secure authorization method (see 
col.5, lines 5-29 where based on different set of instructions that corresponds to 
Applicant's associated security level a different biometric challenge being 
conducted that corresponds to Applicant's different methods and if verified the 
secure password is being retrieved for access); authorizing an individual according 
to the secure authorization method (see col.5, lines 5-29 where based on the 
verification of biometric challenge authorization is being done by verification; 
col. 8, lines 37-65 details the different authorization method or authentication). It 
would have been obvious to one of ordinary skilled in the art at the time the invention 
was made to utilize Brown's biometric authorization methods that corresponds to 
different rules based on different instructions where the biometric information's are 
stored in the database in Nielsen's password database automatic password generation 
security method in view of Bellemore et al's history table and password change rules in 
order to invoke a security process in response to client transmission of a connection 
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message to the database management and to provide an authentication rule associated 
with a user based on different parameters of biometric data of a user. 

As per claim 12 Nielson (6,182,229 B1) teach all limitation of the claim but do not 
explicitly disclose the step of changing password includes: archiving the first password 
for use in accessing archival files secured with the first password. However Bellemore 
et al (6,145,086 A) disclose security and password mechanism with relationship to a 
database where the process of changing a password includes archiving the password 
as old password (see col.5, lines 23-27 where it disclose history table contains 
used password as also depicted in fig. 5, item 209). It would have been obvious to 
one of ordinary skilled in the art at the time the invention was made to utilize Bellemore 
et ars history table in Neilson's password database in order to archive old passwords 
for approval of new password and by comparison means to be sure the new password - 
does not be the same as last N old passwords. 

As per claim 15 Nielson (6,182,229 B1) teach the method of changing a first password 
for securing files accessible by password data entry as defined in claim 1 1 wherein the 
step of determining a plurality of files secured with the first password comprises the step 
of determining from the password database, files associated with the first password 
(see col. 3, Iine67 and col.4, lines 1-2 where passwords within the database 
protect the remote server; col. 3, lines 12-22 where a table with each entry of URL 
specifies the site access protocol and the name of the site where each URLs 
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corresponds to plurality of secure files and the encrypted password 
corresponding to a url file as depicted in fig. 2 corresponds to Applicant's first 
password). 

As per claim 16 Nielson (6,182,229 B1) teach the method of changing a first password 
for securing files accessible by password data entry as defined in claim 15 wherein 
those files associated with the first password are identified because they are identified 
by an identifier associated with the first password (see fig. 2 where user id associate 
with their corresponding password and file url; col. 3, lines 48-53 where the 
association with controlled web site or a page. Examiner has considered address 
of secure web site URL as a file that need password for access since url address 
could corresponds to a particular file for access). 

As per claim 17 Nielson (6,182,229 B1) teach the method of changing a first password 
for securing files accessible by password data entry as defined in claim 1 1 wherein the 
step of determining a plurality of files secured with the first password comprises the step 
of determining from accessible files, those files associated with the first password (see 
fig. 2 where user id associate with their corresponding password and file url; 
col.3, lines 48-53 where the association with controlled web site or a page. 
Examiner has considered address of secure web site URL as a file that need 
password for access since url address could corresponds to a particular file for 
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access and they are secure since the password and possibly user IDs are 
encrypted as depicted in fig. 2). 

As per claim 18 Nielson (6,182,229 B1) teach the method of changing a first password 
for securing files accessible by password data entry as defined in claim 1 1 wherein the 
step of providing a second other password includes the step of automatically generating 
the second other password (see col. 5, lines 555*61 where it disclose passwords can 
be generated automatically by. password management). 

As per claim 19 Nielson (6,182,229 B1) teach the method of changing a first password 
for securing files accessible by password data entry as defined in claim 18 wherein the 
method of changing first password is automatically repeated at intervals (see col. 19-20 
where it disclose the password particular to specific site (URL address (file) could 
be random for enhancing the security where such password corresponds to 
Applicant's first password as detailed in claim 11 above). 

As per claim 20 Nielson (6,1 82,229 B1 ) teach the method of changing first password is 
automatically repeated at intervals (see col. 19-20 where it disclose the password 
particular to specific site (URL address (file) could be random for enhancing the 
security where such password corresponds to Applicant's first password as 
detailed in claim 11 above) but do not disclose explicitly changing the password is 
repeated upon detection of a breach of a password and upon expiry of a password. 
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However Bellemore et al (6,145,086 A) disclose the method of automatically changing 
the password is repeated upon detection of a breach of a password and upon expiry of 
a password (see fig. 3, item 310, 314 and 318 where determination is made for 
breach of a password by monitoring the number of failed attempt; item 360, 370 
and 328 in fig. 3 represent the expiry of password monitoring). It would have been 
obvious to one of ordinary skilled in the art at the time the invention was made to utilize 
Bellemore et al's history table and password change rules in Neilson's password 
database automatic password generation security method in order to invoke a security 
process in response to client transmission of a connection message to the database 
management. 

Conclusion 

1 0. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Kambiz Zand whose telephone number is (571) 272- 
381 1 . The examiner can normally reached on Monday-Thursday (8:00-5:00). If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gilberto Barron can be reached on (571 ) 272-3799. The fax phone numbers for the 
organization where this application or proceeding is assigned as (703) 873-9306. 
Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published 
applications may be obtained from either Private PAIR or Public PAIR. Status 
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information for unpublished applications is available through Private PAIR only. For 
more information about the PAIR system, see http://pair-direct.uspto.gov. Should you 
have questions on access to the Private PAIR system, contact the Electronic Business 
Center (EBC) at 866-217-9197 (toll-free). 
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